$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/ec11c3d2-17e5-39a3-a234-23d15e9db737.roa File: ec11c3d2-17e5-39a3-a234-23d15e9db737.roa (raw, json) Hash identifier: /yyc92gdh1D7UMJm4pC2hL5srO2jxoFjUPDlYcxHEK4= Subject key identifier: A7:07:BE:CB:72:50:05:5E:F1:98:F0:6F:01:69:EA:B8:04:26:73:DE Certificate issuer: /CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Certificate serial: 010D0C9F4328584FD3C13AC1D3AF87287DB36C40 Authority key identifier: 59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/ec11c3d2-17e5-39a3-a234-23d15e9db737.roa Signing time: Fri 13 Nov 2026 14:00:14 +0000 ROA not before: Fri 13 Nov 2026 14:00:14 +0000 ROA not after: Thu 11 Feb 2027 14:00:14 +0000 asID: 22223 IP address blocks: 184.94.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d3:c1:3a:c1:d3:af:87:28:7d:b3:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Validity Not Before: Nov 13 14:00:14 2026 GMT Not After : Feb 11 14:00:14 2027 GMT Subject: CN=2a1ee48c-a6f0-46d7-8850-4296de30c3c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c4:66:0d:6f:d0:bc:8a:a9:40:29:c4:a0:44: a4:57:a8:c8:b2:d5:2e:53:c3:34:3e:f2:31:25:0a: f6:a7:92:aa:bd:d4:25:31:65:a2:0b:c3:66:dc:5a: 21:27:6c:55:b4:ac:96:28:eb:ed:48:32:5c:dc:84: 40:65:1c:5c:4b:b7:6c:00:c1:1f:66:4c:d2:a1:60: a0:9b:f8:0f:35:14:62:9e:5b:57:96:38:89:f3:1c: 26:d8:b7:e8:f7:1c:64:a8:9a:3a:a1:6b:c2:0c:48: 01:a0:de:9c:87:2c:15:2a:35:3d:25:55:0f:dd:27: c9:0c:74:a5:f2:82:35:74:31:8c:1a:89:52:41:d6: e1:d0:6f:66:48:1f:ff:49:7d:d9:b6:89:b7:4e:48: 22:e1:e8:0b:da:f6:39:fc:c5:21:33:81:9c:96:16: 79:59:7e:34:67:30:5e:5f:f5:b5:be:54:bf:38:5f: 47:64:02:4a:84:a9:27:11:8e:cc:9f:5c:15:a3:3e: a2:88:9a:5d:a2:8e:df:6b:5f:57:da:2f:71:a9:59: 90:5a:3f:56:ce:59:e9:50:c3:0a:cb:62:f0:80:ae: df:23:87:1b:bb:62:3a:23:01:f6:b2:72:b5:7b:69: a3:9a:f6:ee:13:d9:49:b8:0a:97:92:a1:03:4e:f6: fb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:07:BE:CB:72:50:05:5E:F1:98:F0:6F:01:69:EA:B8:04:26:73:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/ec11c3d2-17e5-39a3-a234-23d15e9db737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl X509v3 Authority Key Identifier: keyid:59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer sbgp-ipAddrBlock: critical IPv4: 184.94.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:29:2d:75:9e:cf:e0:09:bb:c3:c7:60:db:61:31:cf:7e:d2: cd:2c:ed:c8:c3:21:06:76:a7:8a:83:26:49:49:fe:57:7e:f9: 1c:f3:73:66:39:73:a8:c9:0d:60:44:ac:90:83:d9:7c:5f:23: 92:90:fd:70:68:89:37:a3:7d:62:b7:6b:78:c3:d2:ed:4d:dd: f2:f9:29:cf:62:29:74:bb:96:1d:f2:e4:45:a3:66:3a:86:0b: ff:11:0a:e5:80:db:13:6a:c5:63:3d:94:76:af:14:5e:79:91: a9:84:91:35:e0:9e:7a:7f:c0:aa:33:f2:bc:83:64:d7:bd:79: 3d:e2:b5:b9:66:7a:bd:2c:88:fb:37:da:7a:aa:a3:93:f5:36: 7a:c9:c5:60:e5:39:88:d9:49:b8:44:c9:1a:48:60:fc:20:ba: 85:28:21:29:9d:45:bc:2a:dd:61:61:3f:52:b2:cd:30:71:bd: 57:79:11:5f:d4:d5:84:60:86:7e:06:b2:bb:01:20:1f:f4:ee: 7b:52:91:99:a6:d3:16:16:b4:5b:a4:e7:b7:7a:51:90:d4:b0: 8c:32:c2:98:8c:00:99:6a:49:e9:a2:72:4c:fa:0c:2d:19:c0: 12:98:9e:e0:8b:bb:cc:0c:6a:fd:b4:90:99:3b:d0:26:8a:ec: 91:2b:e8:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/TwTrB06+HKH2zbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzYmYxNDktM2U4OS00Y2E0LWI5NmQtOTE4YzJlYWI4 N2Q4MB4XDTI2MTExMzE0MDAxNFoXDTI3MDIxMTE0MDAxNFowLzEtMCsGA1UEAxMk MmExZWU0OGMtYTZmMC00NmQ3LTg4NTAtNDI5NmRlMzBjM2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8RmDW/QvIqpQCnEoESkV6jIstUuU8M0PvIx JQr2p5KqvdQlMWWiC8Nm3FohJ2xVtKyWKOvtSDJc3IRAZRxcS7dsAMEfZkzSoWCg m/gPNRRinltXljiJ8xwm2Lfo9xxkqJo6oWvCDEgBoN6chywVKjU9JVUP3SfJDHSl 8oI1dDGMGolSQdbh0G9mSB//SX3Ztom3Tkgi4egL2vY5/MUhM4GclhZ5WX40ZzBe X/W1vlS/OF9HZAJKhKknEY7Mn1wVoz6iiJpdoo7fa19X2i9xqVmQWj9WzlnpUMMK y2LwgK7fI4cbu2I6IwH2snK1e2mjmvbuE9lJuAqXkqEDTvb7eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcHvstyUAVe8ZjwbwFp6rgEJnPeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNi ZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThjMmVhYjg3ZDgvZWMxMWMzZDItMTdlNS0z OWEzLWEyMzQtMjNkMTVlOWRiNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDIzYmYxNDktM2U4OS00Y2E0LWI5 NmQtOTE4YzJlYWI4N2Q4L2QyM2JmMTQ5LTNlODktNGNhNC1iOTZkLTkxOGMyZWFi ODdkOC5jcmwwHwYDVR0jBBgwFoAUWdolHf/bCSCEwSKLLyC+KA2QoukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNiZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThj MmVhYjg3ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuF6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACspLXWez+AJu8PHYNthMc9+0s0s7cjDIQZ2p4qDJklJ/ld++Rzzc2Y5 c6jJDWBErJCD2XxfI5KQ/XBoiTejfWK3a3jD0u1N3fL5Kc9iKXS7lh3y5EWjZjqG C/8RCuWA2xNqxWM9lHavFF55kamEkTXgnnp/wKoz8ryDZNe9eT3itblmer0siPs3 2nqqo5P1NnrJxWDlOYjZSbhEyRpIYPwguoUoISmdRbwq3WFhP1KyzTBxvVd5EV/U 1YRghn4GsrsBIB/07ntSkZmm0xYWtFuk57d6UZDUsIwywpiMAJlqSemickz6DC0Z wBKYnuCLu8wMav20kJk70CaK7JEr6M4= -----END CERTIFICATE-----Generated at Sun Nov 15 15:31:09 2026 by rpki-client